003

Before he’s even finished breakfast, Stan-O becomes the object of international attention.

She has IP addresses in Brazil, Turkey, the US and Hungary.

Online, she’s known only as “The Romanian.”

And she just let herself into the insurance co’s servers through Stan–O’s laptop.

004

Breach

The romanian has ransom on her mind.

Once inside the insurance co’s walls, she has access to all shared data — including DJOHNSONHLTH_P904824/.

And so she plants a present inside our file: ransomware.

9:55am: Now she waits for a hospital employee to trip the wire.

At 9:59am, DJOHNSONHLTH_P904824/ is opened, instantly triggering a systemwide encryption of the hospital’s database farm, crashing their EMR and cutting off patient care. They have no backup and no options. Until an anonymous offerto help arrives.

005

Good Times

And it’s au revoir to the CISO.

The CISO’s walking papers were drawn up even before they wired the $2 million. Mr. Johnson was never told why his surgery was suddenly delayed. And as they exited the hospital late that night, one executive was overheard asking, “Is this disaster over yet?”